Hi guys,

I have a custom sitemap provider, which reads and loads the sitemap data from sql database which is then used with a treeview control for site navigation. Roles are also loaded from database for each node, for example

AdminRole, FeesRole, CommunicationRole for the root node and only AdminRole, FeesRole for Fees node and AdminRole, CommunicationRole for Communications node as the node Roles.
 

I am using windows authentication and in my web.config I have authentication mode="Windows", and also Impersonate = true as this is an Intranet application.

I also set SecurityTrimmingEnabled="true" in the web.config.

but still I see all the treeView nodes when I login as a different user from different role.

I have the 3 Groups created in windows as AdminRole, FeesRole, CommunicationRole too and each one has a use for testing.

Aren't the Groups in Windows the same as Roles in Asp.Net...?

I even tried and change the role Names in database to the full name: MachineName\RoleName (i.e.: MyVirtualPC\FeesRole ) but still didn't work.

Any help is greatly appreciated.

Regards,

Mehdi
 

Hi

If you want to get roles of login user from SQL Server, you will use the default SqlRoleProvider.

If you want to retrieves role information for a Windows user based on Windows security groups with ASP.NET applications. you will use the WindowsTokenRoleProvider.

Here is an example about how to use WindowsTokenRoleProvider, Hope it helps

http://msdn2.microsoft.com/en-us/library/ms998314.aspx

Hello XiaoYong Dai,

Thanks for your reply. I read that article, and I have to use windows Roles. Windows Groups in ASP.NET as roles. I have already used the configuration described in the link usinf WindowsTokenProvider but still no luck and I wouls see all the nodes in treeview.

Regards,
Mehdi
 

Hi

What is the test result if you use the following code?

Roles.IsUserInRole(HttpContext.Current.User.Identity.Name, "RoleName");

I get True.